PT-2019-13714

Name of the Vulnerable Software and Affected Versions cosenary Instagram-PHP-API aka Instagram PHP API V2 as used in the UserPro plugin through 4.9.32 for WordPress Description The issue is related to cross-site scripting XSS via the error description parameter in the example/success.php file. Th...

WordPress: Stored XSS on Broken Themes via filename

Hi, I've found something here, Description XSS Stored because filename of theme when broken, So when theme is broken, Wordpress will inform the name of theme who has been broken which is the folder name of theme and inform the error with description message. F342862 Looks like the filename is...

PT-2016-6621

Name of the Vulnerable Software and Affected Versions Accellion Kiteworks versions prior to kw2016.03.00 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via the code, error, or...

PT-2015-5520

Name of the Vulnerable Software and Affected Versions IBM Tivoli Federated Identity Manager versions 6.2.0 through 6.2.0 FP16 IBM Tivoli Federated Identity Manager versions 6.2.1 through 6.2.1 FP8 IBM Tivoli Federated Identity Manager versions 6.2.2 through 6.2.2 FP14 Description The issue allows...